Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/A3FBC4668A3511ECB4502D0DC4F9AE02.roa
File:                     A3FBC4668A3511ECB4502D0DC4F9AE02.roa (raw, json)
Hash identifier:          wJwYPO+fwG1DzfXIB7tLWx4w4Z7LBKlhdGTpVmUtFJk=
Subject key identifier:   C0:8A:57:90:25:13:C4:8F:A6:5C:7C:BF:30:CC:98:95:82:88:05:46
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       0464
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/A3FBC4668A3511ECB4502D0DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:49:11 +0000
ROA not before:           Tue 17 Feb 2026 00:20:43 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149498
IP address blocks:        103.181.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Feb 17 00:20:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45ff7-1eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:63:c1:c3:49:fd:ee:2c:b9:f9:f3:dc:9d:
                    d3:b6:54:db:56:e2:51:85:c7:d7:39:65:ee:55:1c:
                    cc:41:bf:3b:77:20:e0:1d:d4:cf:16:be:a2:f5:14:
                    72:26:be:7b:a6:3b:8c:06:4d:6d:81:12:3c:b8:68:
                    0f:30:7c:b3:13:1a:66:b7:64:99:3e:d4:f1:ae:ec:
                    88:8d:81:ca:b1:ea:4f:a4:b1:c7:09:fc:3f:15:f4:
                    fa:99:79:40:3c:2b:b1:93:07:31:a9:03:77:bc:4a:
                    fc:40:05:03:a8:7b:04:be:e8:88:a1:b8:66:d4:e9:
                    d3:d7:c3:f0:46:4f:c3:37:7a:f3:61:4e:b7:d9:4d:
                    fc:45:e5:e2:f3:d5:6b:51:a3:40:c6:d6:0c:05:70:
                    43:93:8c:e5:84:ba:b3:51:60:82:b0:0e:aa:fe:4d:
                    c7:27:c0:80:90:18:96:16:07:61:33:2d:42:30:86:
                    b7:50:9d:c5:76:e4:f1:d3:0a:cb:a6:9e:f8:fb:e1:
                    8c:0d:e1:c7:c6:41:7d:ef:9f:45:33:1f:cb:82:fa:
                    00:23:ff:ae:46:34:40:05:0b:c6:bf:3f:fb:cb:52:
                    90:07:9d:cb:fd:ea:2c:95:0f:c6:19:16:87:cb:71:
                    1b:12:27:95:d5:e7:23:9a:fb:b6:a3:7c:d7:f3:0f:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8A:57:90:25:13:C4:8F:A6:5C:7C:BF:30:CC:98:95:82:88:05:46
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/A3FBC4668A3511ECB4502D0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:df:ca:7b:4d:19:b0:e7:81:6e:d8:2f:2a:2b:bd:d3:80:
         db:9a:0c:e8:84:22:5c:9c:e1:dd:39:36:01:5f:7c:84:42:f9:
         87:a2:5d:16:00:88:77:eb:13:21:bb:ca:13:d5:02:b7:0e:1c:
         90:11:0c:67:ad:90:2d:a8:aa:59:f7:97:42:d0:a2:69:61:de:
         97:aa:d2:28:1c:bc:92:c2:3a:b4:47:7d:06:12:ed:37:4f:36:
         33:e3:23:db:dc:3d:d3:a6:50:40:eb:d8:0f:75:3e:88:dd:46:
         00:6e:01:b2:52:38:5f:6c:ae:f7:ef:e3:53:1c:77:a9:f2:95:
         8a:8b:97:bd:4a:58:a5:d3:44:1a:ea:65:9b:7a:b4:7e:c3:85:
         2e:7a:5f:70:2e:2c:a6:19:fe:41:e2:55:d8:9f:db:4e:4d:7d:
         d0:7b:2a:91:78:3c:1f:80:4f:87:6e:28:e5:29:16:41:f3:4c:
         e2:f2:62:60:16:d7:d6:a3:63:78:21:f5:b0:d5:67:22:dc:7d:
         68:c3:8d:66:25:54:76:48:7c:e3:0d:e9:1d:10:a4:46:9f:ee:
         6f:81:30:cb:b4:87:5c:9a:3f:0a:6f:89:8b:19:37:a6:86:38:
         ea:ab:c9:aa:c3:95:bc:f3:d7:9a:c9:8c:c5:49:1c:3a:29:2c:
         a7:5d:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:01 2026 by rpki-client